Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
File: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer (raw, json)
Hash identifier: 9M5wVy1A7Q5vmDUa9ZCz+MdvH4GbxbBEIRPtOgjXTUQ=
Subject key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42506631D7CDC83F0A84015DBC3EEC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 30758
AS: 50540
AS: 59887
AS: 62077
AS: 62095
IP: 185.48.24.0/22
IP: 2a04:b140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:06:63:1d:7c:dc:83:f0:a8:40:15:db:c3:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:77:98:d1:44:61:b3:00:21:8e:9a:5c:f8:
e3:20:05:77:06:aa:0d:6a:f8:75:e0:14:3a:9c:f7:
73:1b:e3:f3:62:c2:30:1e:9a:1d:08:a5:52:f5:aa:
96:f9:c2:54:0e:b9:b9:c9:e2:11:ca:e4:f6:55:a2:
94:1a:0e:ef:f6:31:7f:5b:0a:a2:51:e6:bc:fc:18:
04:b4:13:78:35:33:a7:80:2f:dc:b1:82:50:65:21:
30:cf:7c:16:48:04:42:05:85:8e:85:0b:d4:6a:9f:
0f:a6:f9:4e:7d:4d:61:cc:ab:14:b9:6e:8d:1c:ef:
fd:a9:52:97:67:70:63:c6:0b:58:ad:7b:bc:5d:0e:
b5:4e:c1:ee:1f:c7:48:67:b5:5d:d8:26:fa:6b:4b:
af:ea:68:3f:18:8b:37:0b:42:f0:fd:e2:a3:e3:d5:
2f:d4:95:2b:89:72:5d:e8:a2:e7:c5:2c:f4:a8:1b:
54:3c:e5:1c:7e:5a:01:42:dc:22:09:8d:c2:de:6f:
c8:a7:df:f7:7c:37:de:ed:8e:d7:49:69:47:59:42:
b0:e5:d3:24:54:d7:c4:01:11:fe:df:a6:24:4b:7a:
ca:7a:34:2b:f5:19:50:ad:9f:4a:ec:17:5c:40:8f:
28:9d:1d:08:88:a0:d1:80:3a:2d:25:c1:df:5e:1b:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.24.0/22
IPv6:
2a04:b140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30758
50540
59887
62077
62095
Signature Algorithm: sha256WithRSAEncryption
18:76:b8:fa:39:2e:f6:96:08:75:3f:b7:e1:45:16:74:14:c6:
e6:e2:a1:2d:2d:19:3b:a9:1e:2e:23:8d:e1:79:66:08:7e:da:
27:37:4c:d2:73:2a:73:6b:10:33:f2:45:33:3d:fb:87:5d:e2:
a9:b9:7e:21:ee:29:1c:61:68:3d:94:26:ba:6c:d1:e3:25:74:
6f:49:60:56:93:2c:80:78:ca:1a:16:0f:13:89:80:4c:59:0b:
af:f2:af:af:6e:62:99:12:34:67:4a:cc:8d:f0:6b:bc:88:85:
b0:31:2c:a5:c1:dd:2b:d4:d0:d8:6f:f5:e5:25:21:d5:79:e7:
ee:10:65:f4:48:39:3d:52:30:a1:5d:ae:d1:ec:41:dc:b2:43:
b9:be:e6:25:94:74:7a:68:19:f7:d6:99:6d:aa:15:c7:06:a1:
97:20:49:9c:d1:bb:b1:f5:04:d7:3b:6e:e6:ca:64:4a:b9:c6:
03:49:2b:f7:5b:45:1b:76:2e:bc:da:c2:21:55:02:01:1f:ba:
e1:e3:7a:56:e6:a8:da:df:db:48:18:f9:83:41:6d:50:61:39:
50:6a:75:8b:74:d6:a5:89:5e:ec:fa:91:72:1f:eb:47:14:37:
c5:9b:ed:71:10:da:44:b4:07:10:7f:55:56:c2:00:fc:7e:05:
dd:58:45:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:12 2024 by rpki-client on console-ams.rpki-client.org